Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2010-1361

CVE-2010-1361—

Cross-site scripting (XSS) vulnerability in shop/USER_ARTIKEL_HANDLING_AUFRUF.php in PHPepperShop 2.5 allows remote atta

23RISCO

abrir ↗

Referência

CVE-2018-14533

CVE-2018-14533—

read_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /v

23RISCO

abrir ↗

Referência

CVE-2013-7274

CVE-2013-7274—

Cross-site scripting (XSS) vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitr

23RISCO

abrir ↗

Referência

CVE-2015-7707

CVE-2015-7707—

Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter

23RISCO

abrir ↗

Referência

CVE-2009-4359

CVE-2009-4359—

Cross-site scripting (XSS) vulnerability in folder.php in the SmartMedia 0.85 Beta module for XOOPS allows remote attack

23RISCO

abrir ↗

Referência

CVE-2007-6673

CVE-2007-6673—

Cross-site scripting (XSS) vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HTM

23RISCO

abrir ↗

Referência✓ VexDay Proof

AvailScript Article Script - 'articles.php' Multiple Vulnerabilities

CVE-2008-4372—webappsphp

Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2011-10013

CVE-2011-10013CRITICAL

Traq 2.0–2.3 admincp/common.php RCE

63RISCO

abrir ↗

Referência

CVE-2011-10013

CVE-2011-10013CRITICAL

Traq 2.0–2.3 admincp/common.php RCE

63RISCO

abrir ↗

Referência

CVE-2011-10013

CVE-2011-10013CRITICAL

Traq 2.0–2.3 admincp/common.php RCE

63RISCO

abrir ↗

Referência

CVE-2010-2341

CVE-2010-2341—

PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta al

23RISCO

abrir ↗

Referência

CVE-2010-2341

CVE-2010-2341—

PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta al

23RISCO

abrir ↗

Referência

CVE-2010-2342

CVE-2010-2342—

SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bandwebsite 1.5 - SQL Injection / Cross-Site Scripting

CVE-2008-5338—webappsphp

Cross-site scripting (XSS) vulnerability in info.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attac

23RISCO

abrir ↗

Referência

CVE-2015-7707

CVE-2015-7707—

Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter

23RISCO

abrir ↗

Referência

CVE-2026-75784

CVE-2026-75784CRITICAL

TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2026-75778

CVE-2026-75778MEDIUM

code-projects Task Management System Login Form index.php select_with_multiple_condition sql injection

33RISCO

abrir ↗

Referência

CVE-2009-3152

CVE-2009-3152—

Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Profession

23RISCO

abrir ↗

Referência

CVE-2026-75774

CVE-2026-75774MEDIUM

karakeep-app karakeep OAuth Sign-In auth.ts improper authentication

33RISCO

abrir ↗

Referência

CVE-2009-4384

CVE-2009-4384—

Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to inje

23RISCO

abrir ↗

Referência

CVE-2009-4384

CVE-2009-4384—

Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to inje

23RISCO

abrir ↗

Referência

CVE-2009-2571

CVE-2009-2571—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2009-3747

CVE-2009-3747—

Cross-site scripting (XSS) vulnerability in index.php in TBmnetCMS 1.0 allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência✓ VexDay Proof

moziloCMS 1.11 - Local File Inclusion / Full Path Disclosure / Cross-Site Scripting

CVE-2009-1367—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2009-3911

CVE-2009-3911—

Cross-site scripting (XSS) vulnerability in settings.php in TFTgallery 0.13 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2009-2438

CVE-2009-2438—

Cross-site scripting (XSS) vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remo

23RISCO

abrir ↗

Referência

CVE-2012-10030

CVE-2012-10030CRITICAL

FreeFloat FTP Server Arbitrary File Upload

63RISCO

abrir ↗

Referência

CVE-2012-10030

CVE-2012-10030CRITICAL

FreeFloat FTP Server Arbitrary File Upload

63RISCO

abrir ↗

Referência

CVE-2010-5018

CVE-2010-5018—

Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script all

23RISCO

abrir ↗

Referência

CVE-2010-5018

CVE-2010-5018—

Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script all

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.